CVE-2019-16149: XSS
An Improper Neutralization of Input During Web Page Generation in FortiClientEMS version 6.2.0 may allow a remote attacker to execute unauthorized code by injecting malicious payload in the user profile of a FortiClient instance being managed by the vulnerable system.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2019-16149?
CVE-2019-16149 is rated as a high severity vulnerability due to its potential to allow unauthorized code execution.
How do I fix CVE-2019-16149?
To fix CVE-2019-16149, upgrade FortiClientEMS to the latest version provided by Fortinet that addresses this vulnerability.
Who is affected by CVE-2019-16149?
CVE-2019-16149 affects users of FortiClientEMS version 6.2.0 and earlier versions.
What type of vulnerability is CVE-2019-16149?
CVE-2019-16149 is an improper neutralization of input during web page generation vulnerability.
Can CVE-2019-16149 be exploited remotely?
Yes, CVE-2019-16149 can be exploited remotely by an attacker to execute unauthorized code.